This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: q5kkUqf8fSCpXjmTg1Li0LywDTPDYs5/LmWUUK8zYHw= Subject key identifier: AF:5D:7A:BE:0C:A1:F4:C1:99:DF:1A:D6:53:12:C3:85:D8:94:9B:A2 Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 138A85F8F0A14866034E4A372CE60BE08ECD08FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03BC Signing time: Fri 05 Dec 2025 02:32:17 +0000 Manifest this update: Fri 05 Dec 2025 02:27:17 +0000 Manifest next update: Mon 08 Dec 2025 08:05:17 +0000 Files and hashes: 1: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) 2: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) 3: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: R8rp0RVkc/E9NWyBkjTSvzqqPrFk3/jqlJuVj+7Yywk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8a:85:f8:f0:a1:48:66:03:4e:4a:37:2c:e6:0b:e0:8e:cd:08:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Dec 5 02:27:17 2025 GMT Not After : Dec 8 08:05:17 2025 GMT Subject: CN=AF5D7ABE0CA1F4C199DF1AD65312C385D8949BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:77:d1:55:cc:4c:f5:05:8f:4b:6c:05:a9: 11:c2:32:ca:3b:28:f4:3d:a6:b8:df:a6:76:de:af: 67:65:fe:f0:37:0a:49:18:5c:4f:85:47:9f:7c:d0: 2b:ca:41:a0:80:34:64:d7:62:77:e9:46:12:a0:8c: 65:fa:90:53:44:c4:9a:0e:b8:43:b5:6d:9e:fd:f5: 00:32:f2:e3:06:52:1b:05:3f:8e:9f:9d:c0:8d:e9: 87:ba:9c:1c:65:97:88:71:0d:b3:5b:d6:0a:ac:75: 02:03:68:b1:7f:f6:97:74:a0:15:cd:17:a5:60:2a: 68:b4:b0:dd:78:54:0d:8c:99:1b:c0:ee:a3:81:da: 2d:3e:85:74:f1:ab:ae:84:62:d5:52:c1:41:4e:3e: 35:24:1a:64:62:d9:c7:0c:8b:38:b7:df:a7:7a:71: 44:68:72:c4:a1:a3:d6:7c:23:b0:ed:64:01:c4:1b: 12:22:92:7b:58:7a:f7:c0:8a:b6:b6:36:1f:17:55: fe:67:9d:9a:e7:aa:c6:ce:05:7b:99:44:33:ad:a2: 19:c5:f4:c4:71:e2:37:d8:ae:c9:54:82:c1:fc:b6: d8:7c:40:36:1d:f0:1c:a5:4d:c9:eb:7c:26:54:ef: 17:2a:dd:8e:c0:a3:81:ae:fa:8c:08:b8:45:2d:20: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5D:7A:BE:0C:A1:F4:C1:99:DF:1A:D6:53:12:C3:85:D8:94:9B:A2 X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:01:fe:74:0f:32:9b:5a:f6:5e:e9:62:30:b4:58:89:b2:bb: 2a:c6:15:40:20:cf:68:22:d7:18:d8:07:a4:0f:ee:f8:2f:4d: f9:cc:8f:3e:1e:9f:91:ac:ce:f5:bf:e8:12:38:b3:9a:4d:8a: 06:c3:71:3c:b1:4e:0c:86:9a:4d:69:6b:9d:4b:81:ef:1c:b1: df:a6:ef:a9:00:da:d1:e3:9e:29:cb:d1:92:a7:81:c4:8b:8d: f1:1e:22:a6:c5:3e:8e:9a:1e:e9:6f:82:31:db:4f:ed:2c:00: 56:4a:d2:69:28:f6:63:d2:b8:fa:84:cf:82:08:1f:2b:06:3d: 7d:84:b7:b1:c1:b4:cc:0f:b5:a7:81:a1:de:19:58:ea:9f:7a: 9c:08:77:09:f2:fa:e5:b6:52:49:f3:16:4a:c4:fc:2a:d2:69: 78:1e:0a:25:c5:da:15:f1:b3:1c:bb:fd:18:36:be:25:e9:94: 74:17:42:57:32:52:94:cb:a6:17:f1:ec:34:44:86:cf:ba:6f: 96:7e:c1:7d:8a:ba:56:78:56:f0:5e:77:a8:b4:1e:27:a2:b8: 6e:47:e2:59:86:9b:93:55:47:aa:b9:17:a1:56:6a:e9:59:c1: 69:d8:75:76:c3:d3:1b:77:21:72:74:46:57:9a:6e:7d:7b:da: d3:17:44:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4qF+PChSGYDTko3LOYL4I7NCPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTEyMDUwMjI3MTdaFw0yNTEyMDgwODA1MTdaMDMxMTAvBgNV BAMTKEFGNUQ3QUJFMENBMUY0QzE5OURGMUFENjUzMTJDMzg1RDg5NDlCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAXfRVcxM9QWPS2wFqRHCMso7 KPQ9prjfpnber2dl/vA3CkkYXE+FR5980CvKQaCANGTXYnfpRhKgjGX6kFNExJoO uEO1bZ799QAy8uMGUhsFP46fncCN6Ye6nBxll4hxDbNb1gqsdQIDaLF/9pd0oBXN F6VgKmi0sN14VA2MmRvA7qOB2i0+hXTxq66EYtVSwUFOPjUkGmRi2ccMizi336d6 cURocsSho9Z8I7DtZAHEGxIikntYevfAira2Nh8XVf5nnZrnqsbOBXuZRDOtohnF 9MRx4jfYrslUgsH8tth8QDYd8BylTcnrfCZU7xcq3Y7Ao4Gu+owIuEUtIBWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr116vgyh9MGZ3xrWUxLDhdiUm6IwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgB/nQPMpta9l7pYjC0WImyuyrGFUAgz2gi 1xjYB6QP7vgvTfnMjz4en5GszvW/6BI4s5pNigbDcTyxTgyGmk1pa51Lge8csd+m 76kA2tHjninL0ZKngcSLjfEeIqbFPo6aHulvgjHbT+0sAFZK0mko9mPSuPqEz4II HysGPX2Et7HBtMwPtaeBod4ZWOqfepwIdwny+uW2UknzFkrE/CrSaXgeCiXF2hXx sxy7/Rg2viXplHQXQlcyUpTLphfx7DREhs+6b5Z+wX2KulZ4VvBed6i0HieiuG5H 4lmGm5NVR6q5F6FWaulZwWnYdXbD0xt3IXJ0Rleabn172tMXRIA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:47 2025 by rpki-client